django_cors_headers_settings_with_allowed_origins.py

1# settings.py
2
3INSTALLED_APPS = [
4    ...,
5    "corsheaders",
6    ...,
7]
8
9MIDDLEWARE = [
10    ...,
11    "corsheaders.middleware.CorsMiddleware",
12    "django.middleware.common.CommonMiddleware",
13    ...,
14]
15
16# Configure the domains that are allowed to make cross-site HTTP requests.
17# You can use CORS_ALLOWED_ORIGINS or CORS_ALLOWED_ORIGIN_REGEXES.
18
19CORS_ALLOWED_ORIGINS = [
20    "https://example.com",
21    "https://sub.example.com",
22    "http://localhost:8080",
23    "http://127.0.0.1:9000",
24]
25
26# Alternatively, to allow all origins (not recommended for production):
27# CORS_ALLOW_ALL_ORIGINS = True